Re: "alert_on_expire" not working in Context

On 11/05/2010 11:39 AM, David Rupprechter wrote:
> Hello,
> =

> I am using prelude correlator 1.0.
> =

> When i use something like this:
> ctx =3D Context(("NETWORK_INFO_NMAP_ATTACKER", saddr), { "expire": 120,
>     "threshold": 150, "alert_on_expire": True }, update =3D True, idmef=
=3Didmef)
> The correlation alert isn=B4t created.
> I had a look at several other plugins and everything seems to be right wi=
th
> my code.
> When i use ctx.alert() the correlation alert is created and everything is=
 ok
> =AD but i want to update the context.
> =


Hello David,

Could you send a SIGQUIT (<CTRL> <ALT> \) to your prelude-correlator runnin=
g in
console (one just before the threshold and another just after) ? That will =
print
useful debug messages, and if you paste them here, we might resolve your pr=
oblem.

BR,

-- =

Fr=E9d=E9ric Yhuel

_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-devel